Icinga/icinga-powershell-framework v1.14.0

Icinga for Windows v1.14.0

on GitHub

1.14.0 (2026-02-11)

Issues and PRs

Security

• #850 Fixes security issue, allowing to access the private key file of the Icinga Agent/Icinga for Windows certificate file GHSA CVE-2026-24414

Bugfixes

• #764 Fixes an issue with the information fetching from the registry for the Icinga Agent, which can throw unhandled exceptions in case of malicious characters in the registry entries
• #783 Fixes possible FIPS exception on some Windows machines, caused by MD5 hash algorithm used to verify the service binary file integrity after download instead of SHA256
• #814 Fixes random chars function to truly generate unpredictable character sequences and to replace Get-Random which is not entirely secure
• #815 Fixes a possible crash for Test-IcingaAddTypeExist, causing the Icinga for Windows installation to fail when third party components are checked which are malfunctioning
• #816 Fixes plugin execution error while using any %IfNotMatch/%IfNotLike/%IfMatch/%IfLike check function for strings containing special characters like :
• #820 Fixes the version detection of the installed Icinga Agent by looking on the local installed icinga2.exe instead of fully relying on the registry version, printing an error in case the versions do not match
• #829 Fixes Set-IcingaCacheData to properly remove cache files in case $null is passed as value
• #833 Fixes registry lookup for Icinga Agent installation to check if the required DisplayName attribute is defined before checking
• #834 Fixes security catalog compilation error on non-english Windows versions, while properly skipping checks on system SID's and improves security by always adding the SeDenyNetworkLogonRight and SeDenyInteractiveLogonRight privilege section for the JEA user SID
• #835 Fixes JEA compiler to always enforce a rebuild of the Framework to ensure integrity of JEA profiles
• #836 Fixes Metric over Time collector not working on Windows 2012 R2 and older
• #845 Fixes a bunch of issues present in the New-IcingaCheck component, resulting in non-desired output value
• #851 Fixes an issue with user updates on domain controllers, which included the domain besides the user name, causing the user updates to fail
• #854 Fixes an issue with the renew certificate job, which updated file permissions with the wrong user NT Authority\NetworkService instead of the correct assigned user
• #855 Fixes an issue with ACL permission handling on non-english Windows versions by looking up the correct names by their underlying SID

Enhancements

• #11 Adds feature to update the cache for performance counter instances to keep track of system changes
• #838 Enhances Icinga for Windows to never load and user PowerShell profiles
• #841 Adds new [INFO] state for notice and un-checked monitoring objects
• #849 Changes CPU provider to use the \Processor(*)\% Processor Time counter instead of \Processor Information(*)\% Processor Utility